Diamond Stone: the Halo and the Omnibar, replanned
Date: 2026-11-11. Revision 1. Drawn in docs/shell-map.html; screens in
docs/ui-shell-mockup.html, section "Halo and Omnibar: arranging and modes".
Everything the Halo and the Omnibar do, the parts they are built from, how a person
adds, removes and reorders what is in them, and the problems people will meet with
both, each with its answer. It replaces the Omnibar, Halo and Halo drawer parts of
docs/DESIGN.md section 7 where they differ, and expands components 85 to 87 of
docs/COMPONENTS.md. Movement is in docs/MOTION.md.
What changed from the earlier plan
- The person can now add, remove and reorder rings. The earlier plan left this out.
- The band has kept places (the person's) and live places (the system's), so arranging never hides urgent work.
- Rings have four clear kinds. Before, "what needs me" and "what I watch" were mixed.
- The Omnibar has nine named modes, including search typed at the bottom of the screen.
- A decision with two answers shows both. Before, "Send back" was hidden under More.
- Forty-four problems are listed with their answers (section 9).
Nothing here has been tried on a phone.
1. The two jobs
| Halo (top) | Omnibar (bottom) | |
|---|---|---|
| Question it answers | "Is anything waiting for me? How are the things I care about?" | "What can I do here?" |
| Used by | The eyes; a glance | The thumb |
| Holds | Things: people, orders, shipments, deadlines | Verbs: go, add, scan, find, and this screen's one action |
| Changes when | The world changes | The screen or the selection changes |
| The person arranges | Which things are kept, and in what order | The order inside its sheets; never the bar itself |
The rule stays: the top is for looking, the bottom is for doing. Nothing in the Halo is the only way to do something, because the top of the phone is out of the thumb's reach.
2. The Halo: what a ring is
A ring is one thing worth a glance. There are four kinds.
| Kind | Where it comes from | Example | Can the person remove it? |
|---|---|---|---|
| You | Always there, always first | Your day, quiet hours, the role you are viewing as, your arrangement | No |
| Needs you | The system: work waiting for this person, grouped by customer, supplier or area | "Al Noor: quote to approve, slab photos to send" | No. It is work. It can be put off until a time, or handed to someone else |
| Watching | The person chose it | A customer, an order, a shipment, a supplier, a colleague | Yes |
| Shortcut | The person chose it | A Place (Money), a saved list ("Quotes waiting over 3 days"), a figure (cash today; today's dollar rate) | Yes |
What can be watched. Any record with a life: customer, enquiry, quote, order, shipment, delivery, supplier order, invoice, case, a person. A watched ring shows the record's stage as its segments and changes when the record does.
Levels are unchanged: thin ring (look today), segmented ring (work waiting, one segment per step), solid amber with a clock (a promise or a legal or money deadline about to be missed). Level is shown by shape as well as colour. Only the system sets a level; a person cannot mark their own ring urgent.
3. The band: kept places and live places
At rest the band shows You, then four places on the S25 (five on the wider A55), then +N if there is more.
| Place | Filled by | Behaviour |
|---|---|---|
| Kept (up to three; none by default) | The person: a watched ring or a shortcut they pinned | Always the same ring in the same position. A small pin mark. Learned by position, used without reading |
| Live (the rest; always at least one) | The system, by rank: urgent, then waiting on me, then deadline, then amount, then age | Shows what most needs this person now |
| +N | Everything else | Opens the pulled-down view |
Rules that make this safe:
- At least one place is always live. However the band is arranged, urgent work has somewhere to appear.
- An amber ring always shows. If every live place is taken, it takes the last one. It cannot be removed or reordered away, only put off with a reason.
- Kept rings needing attention show it where they are. A kept customer with something waiting gains its segments and count in place; it does not also appear as a second ring.
- Live rings do not jump under a finger. Their order is worked out when a screen opens and when the band is pulled down, not while the person is looking at it. A new ring forms in the last live place; an amber one is the exception and arrives at once.
- A ring that is finished leaves by itself. A watched order that is delivered and paid seals with a tick and goes, with "Removed: delivered. Undo" in the Omnibar.
4. Adding, removing and reordering
Every way has a button; none depends on a drag or a long press alone.
Adding
| From | How |
|---|---|
| Any record | More → "Watch in Halo". The Omnibar confirms with Undo |
| Any row or card | Press and hold → preview → "Watch" |
| The pulled-down Halo | An "Add" tile: search for a record, pick a Place, a saved list or a figure |
| Search | Each result has "Watch" beside "Open" |
| A list with filters set | "Keep this list in my Halo" |
| The system offers | After the third visit to the same record in a day: "Watch this order?" once, never again if declined |
A newly watched ring goes to "Watching" in the pulled-down view. It reaches the band only if the person keeps it in a kept place, or when it needs them.
Removing and quieting
| The ring | What can be done |
|---|---|
| Watching, Shortcut | Remove. Undo in the Omnibar; also listed under "Recently removed" for 30 days |
| Needs you | Put off until later today, tomorrow morning, or a chosen time. Amber rings need a reason and can be put off once. Hand over to a colleague who has the same permission, with a note; they must accept |
| A whole kind of alert | Turned off under Me → Alerts, within what the administrator allows. Some are required for a role and cannot be turned off |
| Everything, for a while | Quiet hours, under the You ring: only amber rings come through |
Reordering
In the pulled-down view, Arrange turns each ring into a row with: a grip to drag, up and down buttons, a pin (keep in the band, first to third place), and remove. No jiggling icons. The same screen shows "Hidden" and "Recently removed", and "Reset to my role's arrangement."
- The arrangement is saved to the person's account, per role, and follows them to any phone.
- Only the kept places and the order of "Watching" are the person's. "Needs you" is always in the system's order, so two people looking at the same work see the same priority.
- Up to 12 watched rings. At 13 the oldest untouched one is offered for removal.
What the administrator sets
Under Control → Halo: the starting arrangement for each role; rings required for a role (the accountant's VAT deadline; the owner's approvals), which a person cannot remove or put off beyond a limit; how long and how often work may be put off; who may hand work to whom; and which figures may be shown as shortcuts to which role.
5. The Halo's three positions and what each can do
| Position | Shows | Can do |
|---|---|---|
| At rest | You, kept and live rings, +N. Labels on Home and lists; rings only on records and forms. When nothing waits: "All caught up", only if the data is fresh | Tap a ring; pull down; press and hold a ring for its menu (Open, Keep here, Put off, Hand over, Remove) |
| One ring open (the drawer) | The band grown downward under that ring: who and when, two lines, the steps if several, one button, and links | The button hands its action to the Omnibar and closes the drawer. Swipe sideways or tap another ring to move between rings. Links: Open the record, Put off, Hand over, Keep or Remove |
| Pulled down | Three groups: Needs you (all of it, in rank order), Watching, Places. An Add tile. Arrange | Open anything; arrange; reach every Place; see what was put off and when it returns |
Also in the Halo:
- The You ring: today's summary; quiet hours; "view as" for people with more than one role; cover (who receives your rings while you are on leave); the surface, motion and "hide amounts" switches.
- Cover. While someone is on approved leave, their "Needs you" rings go to their alternate, marked "for Salim". Nothing waits unseen.
- More than one role. One Halo; rings from every role the person holds, each tagged; a filter in the pulled-down view.
- Back to. After acting on a ring from another screen, a chip returns the person to where they were.
- Age. Without signal the rings show their saved state with its age, counts turn grey, and "All caught up" is never shown.
By kind of user
| User | Rings | May arrange? |
|---|---|---|
| Staff, all roles | The full Halo | Yes |
| Driver | You, this job, next job | No: three fixed rings |
| Logistics company | You, new jobs, moving, invoices | No |
| Customer | No Halo. The portal shows one line of words with counts (docs/SITE-DESIGN.md section 13; "Customers" at the end of this document) |
No, with one exception below |
| Customer who is a trader, or any customer with more than five open orders | The same line, plus the orders they choose to watch | Yes, watched orders only |
6. The Omnibar: nine modes
One capsule, always in the same place. Its parts change with what is on screen; the accent button never moves.
| Mode | When | Left | Right |
|---|---|---|---|
| Rest | Home, lists | Place: icon and name of the area, with the count of what needs you | Add (accent), Scan, Search |
| Action | A record is open or a card chosen | More | One accent button naming exactly what it does: "Approve 1,260.000" |
| Decision | The step has two answers | More | A quiet "Send back" and the accent "Approve". Both visible |
| Several | Rows are selected | "3 selected" and a cross | The action for all of them |
| Result | After an action | A tick and what happened | "Undo" naming what it undoes |
| Typing | A form, with the keyboard open | The bar is hidden; the form's own action sits above the keys | |
| Search | Search was tapped | The bar becomes the search field, at the bottom, above the keys; results fill the screen above it | A cross; Scan |
| Camera | Scanning or photographing | Close; mode | The shutter |
| Working | An upload or a long action | What is happening, with a line of progress | Hide (the work continues) |
When signal is lost the bar keeps working. An action that can wait is done at once and marked "Waiting to send"; one that cannot (money) says so before it is tapped.
The four things at rest
Place. Shows where the person is. Tap for the Places sheet: Home, the role's areas, settings. The count on it is the Halo's "needs you" count, and tapping the count brings the Halo down, so the person never has to reach the top. Press and hold returns to the previous Place.
Add. The few things this role creates, in a fixed order, with the person's own most used three in a first row. It reads the screen: on a customer's record the first item is "Quote for Al Noor". Press and hold opens the person's first item directly.
Scan. One camera that works out what it sees: a label or code opens its record; a document is squared and read; a business card becomes a contact. It reads the screen too: inside a goods receipt, a scanned label ticks that slab. If the camera is refused, the code can be typed.
Search. Finds, in one field: records by name or number; people; settings; and actions ("new quote", "leave"). Before typing it shows recent records. It also answers small sums in place: "3250 usd" shows the amount in rials at today's company rate, and "86 m2 20mm" a weight. Each result offers Open and Watch.
What the person can change in the Omnibar
The bar's four positions are the same for everyone, always. That is what lets a thumb find them without looking. What can change:
| Can change | Where |
|---|---|
| The order of Places, and which are shown first | Places sheet → Arrange |
| The first row of Add (three favourites) | Add sheet → Arrange; otherwise the three most used |
| Which hand: the accent button on the right (default) or the left | Me → Appearance |
| Size set (Compact or Comfortable) | Me → Appearance |
7. How the two work together
- A ring is tapped. The drawer opens: what, who, how much.
- Its one button is pressed. The drawer closes and the Omnibar is now in Action or Decision mode for that item, with the record behind it.
- The action is taken with the thumb. Money asks for the fingerprint.
- The Omnibar shows Result with Undo. The ring's segment fills; if it was the last, the ring seals and leaves.
- The next thing waiting becomes current, and "Back to" offers the screen the person came from.
Opening a ring to read it changes nothing. Only the Omnibar acts.
8. Parts
Sub-components of components 85 to 87. Each is built and tested alone.
Halo
| Part | Made of | States |
|---|---|---|
| Band | Surface, rings, handle | Rest (tall, with labels) · compact (rings only) · one open · pulled down · stale |
| Ring | Stroke or segments; a centre (icon, face or initials); count; label; pin mark; level | Thin · segmented · amber · sealed · put off · stale · selected · pressed |
| +N | A ring with a number | |
| Handle | A short bar; also a button | Rest · dragging |
| Calm line | "All caught up", with the time checked | Only when fresh |
| Drawer | Tag; who and when; summary; step pills; one button; links; "Back to" | One step · several steps · read-only (no permission to act) · stale |
| Pulled-down view | Group heading; ring tiles with a line of text; Add tile; Places grid; Arrange | View · arrange · filtered by role |
| Arrange row | Grip, ring, name, up, down, pin, remove | Kept · watching · hidden |
| Ring menu | Open, Keep here, Put off, Hand over, Remove | By kind of ring |
| Put-off sheet | Times; a reason for amber | |
| Hand-over sheet | Colleagues who may act; a note |
Omnibar
| Part | Made of | States |
|---|---|---|
| Capsule | Surface (glass by level), two groups | The nine modes |
| Place chip | Icon, name, count | Rest · pressed · with count · name shortened to icon |
| Cluster button | Icon; a name for the screen reader | Add (accent) · Scan · Search |
| Action button | Verb, amount or object | Rest · busy · hold to confirm · needs fingerprint · unavailable offline |
| Second answer | A quiet button | Decision mode only |
| More | Opens a menu; destructive items last, in the bad tone, with confirmation | |
| Result strip | Tick, words, Undo | Done · queued · failed with "Try again" |
| Selection count | Number, cross | |
| Search field | Field, cross, Scan | Empty (recent) · typing · no results · offline (saved records only) |
| Progress line | Words, line, Hide | Measured · working |
| Places sheet | Home, areas, settings; Arrange | |
| Add sheet | Favourites row; the role's list; "for this record" first | |
| Scan screen | Viewfinder, what was recognised, type by hand, torch | Looking · found · unreadable · no permission |
What the server sends
The Halo is worked out on the server, so every phone and every colleague sees the same thing. For each ring: its kind, what it is about, level, count, steps and which are done, a label, when it was worked out, and what the person may do with it. The phone stores only the arrangement and shows what it is sent. Each module declares its own ring rules in one list ("an approval waiting → a segmented ring for the approver"), so adding a module never means editing the Halo.
9. Problems people will meet, and the answers
Halo
| # | Problem | Answer |
|---|---|---|
| 1 | The top of the phone is out of the thumb's reach | Nothing in the Halo is the only way. The Place chip carries the count and brings the Halo down |
| 2 | Pulling the band down opens Android's notification shade instead | The pull starts on the band, below the status bar. The handle and +N are tap routes. Tried on both phones before building |
| 3 | Rings without words mean nothing to a new person | Labels on Home and lists. Every ring has a spoken name. A first-week coach note points at each kind once |
| 4 | Too many rings | Four or five places, then +N. Work is grouped by customer, so ten tasks for one customer are one ring |
| 5 | Everything looks urgent, so nothing is | Only the system sets levels. Amber is reserved for promises and legal or money deadlines. How often each kind is put off or ignored is measured, and a kind that is mostly ignored is demoted |
| 6 | Rings change place and the finger lands on the wrong one | Kept places never move. Live places re-rank only when a screen opens |
| 7 | "I removed something and cannot find it" | Recently removed, for 30 days. Reset to the role's arrangement |
| 8 | A person hides work they do not want to do | Work cannot be removed, only put off within limits or handed over with acceptance. The owner's weekly digest lists what was put off more than once |
| 9 | Handed-over work falls between two people | It stays with the sender until the other accepts. Unaccepted after two hours, it returns |
| 10 | Someone is away and their rings wait | Cover: rings go to the alternate while leave is approved |
| 11 | Counts cause anxiety | No red. Counts are of things, not messages. A calm state is shown as calm |
| 12 | "All caught up" shown when the phone simply has no signal | Never shown unless the data is fresh. Stale rings are grey with their age |
| 13 | The band takes room from the content | It shrinks to rings only on scroll, and is compact on records and forms |
| 14 | A customer's name is visible in the Halo while another customer looks at the phone | "Hide amounts" also turns ring labels to initials. The driver's Halo and the customer's portal never show other parties |
| 15 | A screen reader reads five rings before the content of every screen | The band is one landmark announced as "Halo, 3 need you". The reader goes straight to the content unless the person enters the band |
| 16 | Enlarged text breaks the ring labels | Labels drop first, at large text sizes; rings and spoken names stay |
| 17 | Arabic | The order mirrors: You is at the right. Counts keep Western digits |
| 18 | Colour-blind people cannot tell amber from accent | Level is shape: thin, segmented, solid with a clock |
| 19 | A push notification and a ring both show the same thing | They are one item. Opening either clears both |
| 20 | Opening a ring by mistake commits something | Reading never acts. Only the Omnibar acts |
| 21 | The drawer covers what the person was reading | It is closed by one tap anywhere, by Back, or by pushing up; "Back to" returns to the place |
| 22 | Pull to refresh and pull the Halo are confused | The band does not scroll with the list. Pulling the list refreshes; pulling the band opens it |
| 23 | Too many watched rings pile up | Twelve at most; finished records leave by themselves |
| 24 | A person with two roles sees a muddle | Rings are tagged by role, with a filter |
| 25 | A phone shared in the yard | The arrangement belongs to the sign-in. Signing out clears it from the phone |
| 26 | Customers who visit twice a year do not understand rings | Customers have no rings: the portal shows one line of words with counts, each a thing they can act on (docs/SITE-DESIGN.md section 13). Tested with real customers |
Omnibar
| # | Problem | Answer |
|---|---|---|
| 27 | The bar hides the last row of a list | Scroll padding the height of the bar; content fades beneath it |
| 28 | The bar and the keyboard fight | The bar hides while typing; the form's action sits above the keys. Search is the exception: it is the bar |
| 29 | The same bar means different things on different screens | The accent button stays in one place; the left side changes shape (Place chip or More); the label always names the action and its object |
| 30 | A tap on the main button by accident | The main action is never destructive. Undo follows every action that can be undone. Irreversible ones need press-and-hold or the fingerprint |
| 31 | A double tap sends twice | One tap only while busy; each action carries a one-time key |
| 32 | Two equally likely answers, one hidden under More | Decision mode shows both |
| 33 | A long label does not fit ("Approve 12,600.000 OMR" in Arabic, large text) | Verb and amount; then verb alone with the amount on the line above; never cut mid-word |
| 34 | Undo vanishes before it is seen | It stays until the next action or leaving the screen. No countdown |
| 35 | A sent WhatsApp cannot be unsent | Messages are held for five seconds with "Undo send"; after that the bar says "Sent", not "Undo" |
| 36 | The bar sits on Android's gesture area | It floats above the system's inset with its own gap |
| 37 | Text on a glass bar over a busy photo | The tint floor; the bar turns solid at the Sun level and whenever contrast would fail |
| 38 | Left-handed use | A switch moves the accent button to the left |
| 39 | Where is Back? | In the top bar of every record and form, and the phone's own Back. The Omnibar never holds Back |
| 40 | Selecting several rows is hard to discover | Press and hold a row; also "Select" under More on every list |
| 41 | No signal | Actions that can wait are done and marked "Waiting to send"; those that cannot say why before the tap |
| 42 | The camera is refused or broken | Type the code by hand; attach from the gallery |
| 43 | The Add list grows as modules are added | The role's list is capped at eight; the rest are found by Search; three favourites lead |
| 44 | Two sheets open on each other | One at a time. Opening one closes the other, and closes the Halo drawer |
10. Settings
| Where | Setting | Default |
|---|---|---|
| Me → Halo | Kept places; order of Watching; hidden; recently removed; reset | None kept |
| Me → Alerts | Which kinds of ring and notification; quiet hours | By role |
| Me → Appearance | Which hand; size set; labels always on | Right; by role; off |
| Control → Halo | Starting arrangement and required rings per role | Section 5 of docs/ROLES.md |
| Control → Halo | Putting off: longest time; how many times; reasons required for | 24 h; twice; amber |
| Control → Halo | Hand-over: who to whom; time to accept | Same permission; 2 h |
| Control → Halo | Figures allowed as shortcuts, per role | Cash and receivables: owner and accountant only |
| Control → Halo | Customers who may watch orders | Traders, and anyone with over five open orders |
11. What to measure once it is used
How often each kind of ring is opened, put off, handed over or ignored; time from a ring appearing to its action; how many people arrange their Halo at all; how often the Place count is used to bring the Halo down; taps on the main button followed by Undo within three seconds (a sign of accidents). A kind of ring that is ignored most of the time is a fault in the rule, not in the person.
12. Decisions
- Up to three kept places, at least one live. Proposed.
- Work can be put off and handed over but never removed. Proposed.
- The system may suggest watching a record visited three times in a day. Proposed: yes, once.
- Customers who are traders may arrange watched orders. Proposed: yes.
- Messages held five seconds before sending. Proposed: yes, with a switch per person.
- A left-hand switch. Proposed: yes.
- Still open from before: whether the pull-down is comfortable below the status bar; whether the Place count is enough for reach. Both need the phones.
Customers (changed 11 November 2026)
Section 5's table gave customers a short Halo. By the owner's request the client
portal now takes the public website's look, and the customer's rings become one line
of words with counts (docs/SITE-DESIGN.md section 13). The Halo and Omnibar remain
for staff, drivers and logistics companies. Trader customers still choose which orders
to watch; they appear in that line.
After the critique (12 November 2026)
From docs/CRITIQUE.md sections 2 and 4. Where these differ from the text above,
these win.
| Rule | |
|---|---|
| The Halo pulls only from its handle | A 48 px target at the band's lower edge. The band itself is tap only, so it does not compete with Android's shade |
| The Omnibar's left slot is always "more" | Sixteen different left slots were drawn. Secondary actions live in its sheet |
| A blocked state | When the main action cannot be done, the Omnibar shows it grey with the reason; a tap goes to what blocks it. Never a teal button that does nothing |
| One main action | Cards carry no teal buttons |
| The Omnibar hides for the keyboard | It does not rise above it |
| One place for Undo | The result strip. It goes on scroll, on leaving, or after 8 seconds; Undo stays under "more" for the session. The 5-second send hold is fixed, not a setting |
| Press-and-hold on a row selects | Preview is a button; a hidden amount shows on tapping an eye |
| Pull to refresh | Our own: 64 px, only at the top of a list, only below the band |
| The Omnibar's zone is solid to the bottom edge | Lists end above it |
| Proposed, not adopted | In the compact state, the Halo and the title share one 48 px row. To be drawn and tried |